CAN Communication Vulnerability in KIA Seltos Instrument Cluster
CVE-2024-51073

6.7MEDIUM

Key Information:

Vendor

KIA

Status
Seltos
Vendor
CVE Published:
22 November 2024

What is CVE-2024-51073?

A vulnerability in the KIA Seltos vehicle's instrument cluster, identified in version 1.0, allows potential attackers to control or disrupt the Controller Area Network (CAN) communications between the instrument cluster and the CAN bus. This issue raises significant concerns regarding the integrity and reliability of vehicle communication systems, though the supplier disputes the findings, citing limitations in the testing environment used for validation. The behavior observed aligns with the Unified Diagnostic Services (UDS) specification, causing further discussion regarding the validity of the reported vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.iso.org/standard/77323.html
https://udsoncan.readthedocs.io/en/latest/udsoncan/servic...
https://github.com/nitinronge91/KIA-SELTOS-Cluster-Vulner...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.